diff --git a/packages/eql/tests/encryption/tests/v4_types.rs b/packages/eql/tests/encryption/tests/v4_types.rs
index a0c7685dd..176715456 100644
--- a/packages/eql/tests/encryption/tests/v4_types.rs
+++ b/packages/eql/tests/encryption/tests/v4_types.rs
@@ -973,7 +973,7 @@ async fn the_v4_query_fixture_is_what_the_dispatch_derives() {
         },
         "email": {
             "plaintext": "alice@example.com",
-            "query": query("TextEq", "email", FfiValue::String("alice@example.com".into())).await,
+            "query": query("TextEq", "email", frame("alice@example.com")).await,
         },
     });
     let path =